Experimenting with Post-Quantum Cryptography

Re:Experimenting with Post-Quantum Cryptography by tptacek on Thursday July 07, 2016 @03:00PM (#12051418)

Are the TLS constructions they're using documented anywhere? Is this a combination of Ring-LWE and, say, ECC, in case there are as-yet-unknown implementation faults in Ring-LWE?

[ Parent | on HN ]

Re:Experimenting with Post-Quantum Cryptography by agl on Thursday July 07, 2016 @03:03PM (#12051438)

We haven't written a spec because we don't intend for this to be widespread. However, the spec would basically be: run both X25519 and NewHope concurrently, concatenate their outputs and feed that into the TLS KDF as normal.

It is indeed a combination of R-LWE and ECC because it doesn't yet seem reasonable to depend on R-LWE alone. Not only because of the possibility of implementation faults in NewHope, but also because of the possibility of significant crypto-analytic advances against R-LWE, even with classical computers.

[ Parent | on HN ]

Re:Experimenting with Post-Quantum Cryptography by NobleSir on Thursday July 07, 2016 @03:41PM (#12051633)

Maybe this is a naive question, not knowing chrome well, but is the source available? Would love to play around with this..

[ Parent | on HN ]

Re:Experimenting with Post-Quantum Cryptography by baby on Thursday July 07, 2016 @04:01PM (#12051746)

https://github.com/google/boringssl/blob/master/include/open...

[ Parent | on HN ]

Re:Experimenting with Post-Quantum Cryptography by aseipp on Thursday July 07, 2016 @05:28PM (#12052191)

and also https://github.com/google/boringssl/blob/master/crypto/newho...

[ Parent | on HN ]

Re:Experimenting with Post-Quantum Cryptography by NobleSir on Thursday July 07, 2016 @06:05PM (#12052371)

cool, thanks

[ Parent | on HN ]

Re:Experimenting with Post-Quantum Cryptography by mkj on Thursday July 07, 2016 @09:49PM (#12053171)

https://github.com/google/boringssl/commit/e25775bcacb120f7f... seems to be the code, as agl described.

[ Parent | on HN ]