Live data from Hacker News

Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

arxiv.org

21–30 of 146 posts

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#21
post #13

Earlier quoted context omitted.

Even if it was, 177days for cracking your password with the most advanced technology that exists in the world, still means you have some very powerful enemies. Practically you don't need to think about it.

I.e. you can solve it by rotating your keys/certificates every 90 days, like the expiry term given by Letsencrypt.

[deleted]

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#22
post #13

Earlier quoted context omitted.

Even if it was, 177days for cracking your password with the most advanced technology that exists in the world, still means you have some very powerful enemies. Practically you don't need to think about it.

I.e. you can solve it by rotating your keys/certificates every 90 days, like the expiry term given by Letsencrypt.

Also probably you should think about all the other security low-hanging fruit first.

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#26
post #13

Earlier quoted context omitted.

Even if it was, 177days for cracking your password with the most advanced technology that exists in the world, still means you have some very powerful enemies. Practically you don't need to think about it.

I.e. you can solve it by rotating your keys/certificates every 90 days, like the expiry term given by Letsencrypt.

They would have a 50% chance of cracking it within 90 days, I would have thought.

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#27
post #9

Quantum computers of this scale are probably 5-15 years out. Basically this is a warning that if you have secrets that should still be kept secret over that timeframe, you should not be using RSA today.

> you should not be using RSA today

Also, always remember that ECC is believed to be just as weak against quantum computers as RCA. So you'll probably want some fusion of pre and post-quantum algorithms.

Or, anyway, get your perfect forward secrecy working and don't rely on asymmetric crypto for confidentiality. Yeah, PFS is very hard to get on some use cases, but it's really the best way to solve this problem.

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#28

Earlier quoted context omitted.

Do I understand correctly, that largest quantum computer that exists today contains less than 100 qubits? Also it does not seem that there's an exponential grow in this area: https://www.statista.com/statistics/993634/quantum-computers... . They hit the wall in 2017. We should be safe for now :)

Those quantum computers can't execute Shor's algorithm, which is required to attack RSA. AFAIK the best relevant factoring result is still 21=3*7 from 2012. There are claims of bigger factored numbers, but they exploited special cases (e.g. factors differing by only two bits) and have no hope of being extended to attack cryptography. https://crypto.stackexchange.com/questions/59795/largest-int... A 2019 paper manged…

Jennifer and Peter Shor wrote a limerick that seems relevant:

   If computers that you build are quantum,
   Then spies of all factions will want 'em.
   Our codes will all fail,
   And they'll read our email,
   Till we've crypto that's quantum, and daunt 'em.
And Volker Strassen responded at a conference:

   To read our E-mail, how mean
   of the spies and their quantum machine;
   Be comforted though,
   they do not yet know
   how to factorize twelve or fifteen.
Source: http://www-math.mit.edu/~shor/notapoet.html

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#29
post #4

Besides the number of qbits, is "multimode memory" real or hypothetical?

From the abstract: We suggest realizing such an architecture using a microwave interface between a processor made with superconducting qubits and a multiplexed memory using the principle of photon echo in solids doped with rare-earth ions.

I would guess hypothetical

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#30
post #13

Earlier quoted context omitted.

Even if it was, 177days for cracking your password with the most advanced technology that exists in the world, still means you have some very powerful enemies. Practically you don't need to think about it.

I.e. you can solve it by rotating your keys/certificates every 90 days, like the expiry term given by Letsencrypt.

Rotating keys works for authentication, but not for confidentiality, since nothing stops an attacker from recording the ciphertext and decrypting past messages.
Post reply on HN