Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NIST announces first PQC algoritms to be standardized

groups.google.com

Post reply on HN
Print view View original

121–130 of 132 posts

Re: NIST announces first PQC algoritms to be standardized

#121

Post by baby »

Shameless plug: I wrote about all these schemes in Chapter 14 on post-quantum cryptography of Real-World Cryptography https://www.manning.com/books/real-world-cryptography?a_aid=...

These are meant as a gentle introduction to the ideas and intuitions behind the schemes. The book is recent but some of that stuff (hash-based signatures) I started writing back in 2015 and is available on my blog: https://cryptologie.net/article/306/one-time-signatures/

At the time the schemes had not yet been chosen, fortunately I picked the right ones :) don't have to rewrite that chapter (yet).

Re: NIST announces first PQC algoritms to be standardized

#122

Post by baby »

RcouF1uZ4gsC wrote: post #17

HN Crypto and Quantum Experts. What is your prediction when classical public key encryption using elliptical curve cryptographic becomes practically vulnerable to quantum computers, such that we would need these PQC algorithms. 10 years out? 20 years out? 50 years out? 100 years out?

I'm betting on never

Re: NIST announces first PQC algoritms to be standardized

#123

Post by baby »

jleahy wrote: post #30
danuker wrote: post #29

Earlier quoted context omitted.

I expect you'd see a large increase in Bitcoin Days Destroyed, perhaps unrelated to market volume, should someone break ECDSA. Bitcoin uses ECDSA to validate whether coins were spent by the owner of an address. https://en.bitcoin.it/wiki/Elliptic_Curve_Digital_Signature_...

The modern wallets don’t publish the public key though, so this is not likely to help.

That's only Bitcoin though

Re: NIST announces first PQC algoritms to be standardized

#124

Post by chasil »

tptacek wrote: post #106
kragen wrote: post #100

Earlier quoted context omitted.

Bernstein being "involved in never-ending drama" is the reason it's legal to export strong cryptography from the US today and the reason much of this PQC work got done at all. He's clearly a person who often fights in cases where almost everyone else surrendered instead, which is presumably what you mean by "the problem is him," but I don't see why you describe it as a "problem". His inclination to tell hard truths,…

It doesn't seem reasonable to say that Bernstein is the reason much of this PQC work got done at all. He was one of the earliest PQC popularizers and probably coined the term. But asserting that he enabled everyone else's work is a little like saying that the person who coined "misuse-resistant authenticated encryption" enabled all the different misuse-resistant schemes; the underlying issue was plainly evident, and…

Bernstein's original lawsuit in the 90s resulted in the lift of ITAR restrictions on strong cryptography.

https://en.m.wikipedia.org/wiki/Daniel_J._Bernstein#Bernstei...

"The ruling in the case declared that software was protected speech under the First Amendment, which contributed to regulatory changes reducing controls on encryption."

Re: NIST announces first PQC algoritms to be standardized

#126

Post by tptacek »

chasil wrote: post #124
tptacek wrote: post #106

Earlier quoted context omitted.

It doesn't seem reasonable to say that Bernstein is the reason much of this PQC work got done at all. He was one of the earliest PQC popularizers and probably coined the term. But asserting that he enabled everyone else's work is a little like saying that the person who coined "misuse-resistant authenticated encryption" enabled all the different misuse-resistant schemes; the underlying issue was plainly evident, and…

Bernstein's original lawsuit in the 90s resulted in the lift of ITAR restrictions on strong cryptography. https://en.m.wikipedia.org/wiki/Daniel_J._Bernstein#Bernstei... "The ruling in the case declared that software was protected speech under the First Amendment, which contributed to regulatory changes reducing controls on encryption."

I'm talking about PQC, not his suit against the government.

Re: NIST announces first PQC algoritms to be standardized

#127

Post by johndough »

capableweb wrote: post #84
haggy wrote: post #25

Earlier quoted context omitted.

Ah thank you. I figured the 'Q' stood for quantum but you saved me a fair amount of googling :)

"fair amount of googling"? Not sure what browser you use, but in most you can select what you wanna search for, click "Search on $searchEngine for $term" and there you go! For PQC, I get Wikipedia link with "PQC can refer to: Post-quantum cryptography" in the description as the 3rd result on Google. Not sure what classifies as "fair amount", but for me it took about 1-2 seconds to find the Wikipedia link ;)

I agree that it is not a lot of work for a single person, but if you add it up over 100,000 readers (just a ballpark guess, I am sure dang can tell us exact numbers), it sums up to at least 2 days of cumulative wasted time, assuming that everyone looked it up. Obviously, not everyone will look it up because of laziness or indifference, but those readers will not understand what the title is about, which is not an ideal situation either.

A similar situation arises with trains, where it is often better to not hold open the door for someone who is late by a few seconds, as the cumulative delay for everyone else in the train exceeds the waiting period of the single person for the next train.

Post reply on HN