Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A Gentle Introduction to Lattice-Based Cryptography [pdf]

cryptography101.ca

Post reply on HN
Print view View original

1–10 of 23 posts

Re: A Gentle Introduction to Lattice-Based Cryptography [pdf]

#2

Post by ArcHound »

Oh this brings me back to my uni days. I suppose that since this is the basis of post-quantum crypto it is a good time to learn this.

Seems to me that these lattices and error-correcting codes are very close to each other, but for some reason they are discussed separately.

I'd wager that there will be some reductions between those problems - maybe I could dig more around that.

Re: A Gentle Introduction to Lattice-Based Cryptography [pdf]

#5

Post by Retr0id »

cykros wrote: post #4

Good stuff to know, just in case the life extension tech explodes and we're all alive by the time cryptographically relevant quantum computers actually hit the scene.

Lattice-based cryptography exists in the present (Both Chrome and Firefox support X25519MLKEM768 hybrid key agreement, by default)

Re: A Gentle Introduction to Lattice-Based Cryptography [pdf]

#6

Post by GTP »

Retr0id wrote: post #5
cykros wrote: post #4

Good stuff to know, just in case the life extension tech explodes and we're all alive by the time cryptographically relevant quantum computers actually hit the scene.

Lattice-based cryptography exists in the present (Both Chrome and Firefox support X25519MLKEM768 hybrid key agreement, by default)

Yes, but it exists because it was deemed better to be cautious and implement PQC despite the uncertainty and different points of view around the time scale to have cryptographically relevant quantum computers (or, from a different point of view, precisely due to the uncertainties). Their comment was in the wrong tone, but the doubts are there. BTW, PQC can be interesting to learn regardless of the discussion around quantum computers.

Re: A Gentle Introduction to Lattice-Based Cryptography [pdf]

#7

Post by Retr0id »

GTP wrote: post #6
Retr0id wrote: post #5

Earlier quoted context omitted.

Lattice-based cryptography exists in the present (Both Chrome and Firefox support X25519MLKEM768 hybrid key agreement, by default)

Yes, but it exists because it was deemed better to be cautious and implement PQC despite the uncertainty and different points of view around the time scale to have cryptographically relevant quantum computers (or, from a different point of view, precisely due to the uncertainties). Their comment was in the wrong tone, but the doubts are there. BTW, PQC can be interesting to learn regardless of the discussion around q…

"will we have a CRQC soon" is the subject of much debate but "will we have a CRQC ever" is pretty uncontroversially a possibility, and so it is worth defending against harvest-now-decrypt-later attacks in the present - which is why X25519MLKEM768 is widely deployed already.

Re: A Gentle Introduction to Lattice-Based Cryptography [pdf]

#8

Post by Razengan »

Retr0id wrote: post #5
cykros wrote: post #4

Good stuff to know, just in case the life extension tech explodes and we're all alive by the time cryptographically relevant quantum computers actually hit the scene.

Lattice-based cryptography exists in the present (Both Chrome and Firefox support X25519MLKEM768 hybrid key agreement, by default)

> X25519MLKEM768

https://www.reddit.com/r/VXJunkies/

Re: A Gentle Introduction to Lattice-Based Cryptography [pdf]

#10

Post by age123456gpg »

I've implemented ML-KEM by the spec as an exercise recently (https://github.com/AlexanderYastrebov/mlkem) and here are related links that helped me understand the math:

* [Enough Polynomials and Linear Algebra to Implement Kyber](https://words.filippo.io/kyber-math/)

* [Basic Lattice Cryptography. The concepts behind Kyber (ML-KEM) and Dilithium (ML-DSA)](https://eprint.iacr.org/2024/1287.pdf)

* [A Complete Beginner Guide to the Number Theoretic Transform (NTT)](https://eprint.iacr.org/2024/585.pdf)

Post reply on HN