11–20 of 66 posts
How did such algorithm make it to the finalist list, passing a lot of steps?!
You can't expect a government department to provide robust security to the masses when the rest of the government is trying the prevent that exact situation.
At this point anything, cryptography related, coming from NIST should be considered compromised.
How did such algorithm make it to the finalist list, passing a lot of steps?!
The same way Dual_EC_DRBG became a NIST standard, the NSA pulls the strings. You can't expect a government department to provide robust security to the masses when the rest of the government is trying the prevent that exact situation. At this point anything, cryptography related, coming from NIST should be considered compromised.
Thanks to the informative resources linked to by jack4818 and ototot I was able to slightly wrap my head around this. I'll share my barely informed, naive understanding in the hopes that it'll help others in a similar position build on it. Please correct me if any of what I share is mistaken! Quantum computers have special properties that make them capable of breaking commonly used encryption schemes. We're dependent…
The reason they do well in this area is that you can implement a Fourier transform with exponentially fewer quantum logic gates than classical logic gates.
Post quantum involves implementing a cryptosystem which can not be reduced to a hidden subgroup problem, but I’m still not sure if this is sufficient (QIP might solve other classes of problems easily)
Earlier quoted context omitted.
The NSA hoped noone would notice.
After all these incidents we've gone through in the last decade, I'm not sure this is irony or just the reality. It can be either, quite frankly.
By now it doesn't matter if there is a conspiracy or not.
The totally boring unimaginative hard nosed practical conclusion is you do not accept cryptographic advice from this source. (NIST, or the US government at large, or any other government either, or really even any large corporation.)
It doesn't require any "aliens guy" at all.
This isn’t the first time I’ve seen something billed as “post quantum” that is completely broken on conventional computers. I wish I could say more about that.
This is truly an incredible result. I want to adopt some PQC to my own stuff recently and considering Rainbow as one of my choice. I also know that Cloudflare is now trying to adopt these PQC protocols[0][1], so I checked the Cloudflare blog post after seeing this attack. Then, I found out a blog mentioning this attack[2], lol. [0] https://blog.cloudflare.com/making-protocols-post-quantum/ [1] https://blog.cloudflare…
The signature schemes seem dodgy to me except for Sphincs and it’s variants and those have big keys and signatures. The keys are not impractically big for many uses but would be tough for things like block chains.
Thanks to the informative resources linked to by jack4818 and ototot I was able to slightly wrap my head around this. I'll share my barely informed, naive understanding in the hopes that it'll help others in a similar position build on it. Please correct me if any of what I share is mistaken! Quantum computers have special properties that make them capable of breaking commonly used encryption schemes. We're dependent…
You already and automatically know it's not that, because the article was not about breaking the encryption with a quantum computer.
It was broken with trivial hardware and in trivial time.
How did such algorithm make it to the finalist list, passing a lot of steps?!
The same way Dual_EC_DRBG became a NIST standard, the NSA pulls the strings. You can't expect a government department to provide robust security to the masses when the rest of the government is trying the prevent that exact situation. At this point anything, cryptography related, coming from NIST should be considered compromised.