A Tiny Startup Racing Google to Build a Quantum Computing Chip

Re:A Tiny Startup Racing Google to Build a Quantum Computing... by avz on Monday February 08, 2016 @03:38PM (#11060727)

You don't need quantum cryptography to defend against attacks that employ quantum computers.

There was an interesting talk on classical encryption algorithms that resist quantum attacks by djb and Tanja Lange at 32c3 last year, see [1,2,3].

TL;DR:

- Shor's algorithm kills factorization-based algorithms like RSA, DSA and including elliptic-curves-based DSA,

- Grover's algorithm allows faster (O(sqrt(N) instead of O(n)) brute-force searches, which means for the same level of security, one needs to double AES key size,

- there exist classical encryption algorithms that have so far resisted quantum-based attacks, e.g. hash-based signatures, Goppa code-based asymmetric crypto,

[1] https://www.youtube.com/watch?v=6XeBvdm8vao

[2] https://media.ccc.de/v/32c3-7210-pqchacks#video (in German)

[3] https://www.reddit.com/r/privacy/comments/3yppbz/post_quantu...

EDIT: formatting

[ Parent | on HN ]

Re:A Tiny Startup Racing Google to Build a Quantum Computing... by nickpsecurity on Tuesday February 09, 2016 @12:17AM (#11063279)

There's been some good work in Merkle Signatures in recent times. I posted a bunch on Schneier's blog here:

https://www.schneier.com/blog/archives/2015/03/friday_squid_...

[ Parent | on HN ]