Coincidentally, we have just published this today, if you want to play with PQ crypto in JavaScript https://github.com/Dashlane/pqc.js
NIST announces first PQC algoritms to be standardized
21–30 of 132 posts
Re: NIST announces first PQC algoritms to be standardized
#22OpenSSH has already chosen NTRU-Prime. Will there be a retrofit of CRYSTALS-KYBER? Or has the market already chosen? DJB is an author on the SPHINCS+ team; glad to see that his work will be part of the standard. https://sphincs.org/
OpenSSH has merely chosen that as its current default. Surely multiple algorithms will be supported in the future as they have in the past.
Re: NIST announces first PQC algoritms to be standardized
#23OpenSSH has already chosen NTRU-Prime. Will there be a retrofit of CRYSTALS-KYBER? Or has the market already chosen? DJB is an author on the SPHINCS+ team; glad to see that his work will be part of the standard. https://sphincs.org/
I imagine they would add support for the standardized algorithms and still support the ones they are currently using too.
Re: NIST announces first PQC algoritms to be standardized
#24HN Crypto and Quantum Experts. What is your prediction when classical public key encryption using elliptical curve cryptographic becomes practically vulnerable to quantum computers, such that we would need these PQC algorithms. 10 years out? 20 years out? 50 years out? 100 years out?
I want to see these actually being implemented in current software ASAP (layered with traditional crypto). As-is it's possible to capture encrypted traffic out of the air, store it for however many decades are needed, and then decrypt it in future.
Re: NIST announces first PQC algoritms to be standardized
#25PQC = post quantum cryptography
Ah thank you. I figured the 'Q' stood for quantum but you saved me a fair amount of googling :)
Re: NIST announces first PQC algoritms to be standardized
#26Obligatory djb warnings: https://ntruprime.cr.yp.to/warnings.html
What's the "obligatory djb warnings"? Something like "any crypto that's not mine isn't great"? ;)
from skimming it, his main argument is that Kyber relies on many constructions (e.g. cyclotomic polynomials) that are actively under attack - researchers have been successfully chipping away at them and show no signs of stopping.
he also alleges that NIST have been moving the goal posts to favor Kyber, and they've been duplicitous in their narrative.
he favors NTRU, which iirc isn't his.
Re: NIST announces first PQC algoritms to be standardized
#27HN Crypto and Quantum Experts. What is your prediction when classical public key encryption using elliptical curve cryptographic becomes practically vulnerable to quantum computers, such that we would need these PQC algorithms. 10 years out? 20 years out? 50 years out? 100 years out?
"When will 256 bit ECC become insecure?" : https://www.metaculus.com/questions/8169/?invite=GpV2Dc
The community prediction is 22% by 2032 which seems way too high IMO. I predict 5% due to advances in automated algorithm search and 0% due to quantum computers in that time frame.
Re: NIST announces first PQC algoritms to be standardized
#28HN Crypto and Quantum Experts. What is your prediction when classical public key encryption using elliptical curve cryptographic becomes practically vulnerable to quantum computers, such that we would need these PQC algorithms. 10 years out? 20 years out? 50 years out? 100 years out?
I think what you are asking may better be answered by ignoring PQC and following CNSA recommendations for up to TOP SECRET. The crypto is likely what you already use, but it defines how to get enough bits of security from an algorithm.
There is a table of transition algorithms on the second or third page, depending on your screen size. [1]
[1] https://apps.nsa.gov/iaarchive/programs/iad-initiatives/cnsa...
Re: NIST announces first PQC algoritms to be standardized
#29HN Crypto and Quantum Experts. What is your prediction when classical public key encryption using elliptical curve cryptographic becomes practically vulnerable to quantum computers, such that we would need these PQC algorithms. 10 years out? 20 years out? 50 years out? 100 years out?
I expect you'd see a large increase in Bitcoin Days Destroyed, perhaps unrelated to market volume, should someone break ECDSA.
Bitcoin uses ECDSA to validate whether coins were spent by the owner of an address.
https://en.bitcoin.it/wiki/Elliptic_Curve_Digital_Signature_...
Re: NIST announces first PQC algoritms to be standardized
#30HN Crypto and Quantum Experts. What is your prediction when classical public key encryption using elliptical curve cryptographic becomes practically vulnerable to quantum computers, such that we would need these PQC algorithms. 10 years out? 20 years out? 50 years out? 100 years out?
I expect you'd see a large increase in Bitcoin Days Destroyed, perhaps unrelated to market volume, should someone break ECDSA. Bitcoin uses ECDSA to validate whether coins were spent by the owner of an address. https://en.bitcoin.it/wiki/Elliptic_Curve_Digital_Signature_...
The modern wallets don’t publish the public key though, so this is not likely to help.