The year in post-quantum crypto [video]

https://media.ccc.de/v/35c3-9926-the_year_in_post-quantum_crypto

by ianopolous • 8 years ago

62 16 8 years ago

media.ccc.de

dvh2• 8 years ago

Last time I asked what is largest integer factorised using quantum computer. There are multiple answers depending on the algorithm, but for the one that can scale into cryptographic levels, the answer is 21.

TrueTom• 8 years ago

High-fidelity adiabatic quantum computation using the intrinsic Hamiltonian of a spin system: Application to the experimental factorization of 291311

https://arxiv.org/abs/1706.08061

dvh2• 8 years ago

This algorithm doesn't scale to crypto levels.

krastanov• 8 years ago

Nobody (at least nobody respected) is claiming we (humanity) have a scalable quantum computer. There are a bunch of interesting research hardwares that have handful of qubits and things are steadily (albeit slowly) growing. But many people in the field have started expecting practically usable hardware to start appearing in the next decade. That level of ubiquitous near-term optimism is pretty new and exciting (especially when looking back to the immense progress of the last 20 years in this field).

analogmind• 8 years ago

Terabyte priv/pub keys, "we are the leading pq lattice based implementation", broken implementations, attack scripts. I have the feeling a lot of submissions are the result of pressure on academia to publish...

A2017U1• 8 years ago

While likely right, that particular entry was more a comedy submission by djb himself, no one is taking pqRSA seriously, the merging of the sig/encryption versions too was itself hilarious and a subtle metajoke about how big the competition is. There's plenty on the line here and govts know it, there's a little bit of a lottery feeling associated with it all.

I do like their honesty about people going after easy targets. The real goal here is breaking some of the big contenders and hopefully more people have a crack.

SIKE and NTRU needs some serious attention/money/cred associated with breaking it

jepler• 8 years ago

The danger is that people, like me, will have literally no idea that this is a "comedy submission". I mean, I know that djb is well-respected in his field and so as an interested layperson I would tend to assume that anything that looks serious is serious. In fact, I did just that when I tried to read the pqRSA paper...

y7• 8 years ago

In this case the pressure mostly comes from the submission deadline for the NIST competition, I think.

PQfanboy2• 8 years ago

And otherwise many of these would all be unactionable research fancies with insufficient review.

Are we going to have standard PQ algos in time for government, infrastructure, and industry to upgrade before disparate or widespread availability of quantum computation capabilities?

One estimate indicated that Bitcoin and ECDSA would be broken with Shor's by - optimistically - 2027.

How many n-year tech acquisition refresh cycles are there between then and now?

Will Grover's algorithm find a more efficient approach?

MrXOR• 8 years ago

The Slide of this talk:

https://fahrplan.events.ccc.de/congress/2018/Fahrplan/system...

The year in post-quantum crypto [video]

Related Stories