Post-Quantum Cryptography
The cluster discusses post-quantum cryptography, including its development, NIST standardization efforts, quantum-resistant algorithms like lattice-based schemes, and the urgency of transitioning from current encryption vulnerable to quantum computers.
Activity Over Time
Top Contributors
Keywords
Sample Comments
Post-quantum cryptography is a thing:https://en.wikipedia.org/wiki/Post-quantum_cryptography
Yes and kinda yes.There's a standardization process going on for post quantum cryptography at the US NIST. Results expected before the almighty RSA-breaking quantum computer arrives.There's still a concern about store-and-encrypt-later (i.e. someone can store encrypted communication today and decrypt it once a QC is available), and how relevant that is depends on some unknowns (how many years to you expect your comms to be secret? how many years till a usable QC is available?).
"Post-Quantum" crypto is already being rolled out in expectation of that though.
Recent discussion about post-quantum cryptography at Google: https://news.ycombinator.com/item?id=12050220
We could use quantum resistant cryptography if this is an actual concern.
It's entirely possible that QC will arrive but will be more of a special purpose accelerator for certain algorithms (think of the way custom ASICs can accelerate specific operations) rather than a general purpose thing. Some form of general purpose QC may happen eventually but that might take quite a bit longer, and it may take longer still for it to be commonplace.In the meantime there will be a strong need for classically computable cryptographic algorithms that are strong against atta
I think it depends. Imagine a future where quantum computers may be in reach by intelligence agencies, but a quantum-resistant public key encryption algorithm has been proposed but not rigorously defended. You wouldn't want to trust either algorithm alone, so you can use both: encrypt the data with the quantum algorithm first, then by the classical one. Decrypting would require breaking both, there's no shortcuts.
There are quantum-resistant encryption schemes.See: https://en.wikipedia.org/wiki/Post-quantum_cryptography
Non-mobile link:https://en.wikipedia.org/wiki/Post-quantum_cryptography
Ok it looks like this article has some good starting points. https://en.wikipedia.org/wiki/Post-quantum_cryptography