Re:Bitcoin’s race to outrun the quantum computer
by ridewinter on Sunday August 18, 2019 @01:25PM
(#20731538)
The only truly safe encryption is quantum encryption. Any classical encryption algorithm should be breakable with quantum computers, even if we haven’t figured it out yet like with Shor’s.
[ Parent
| on HN ]
Re:Bitcoin’s race to outrun the quantum computer
by zazagura on Sunday August 18, 2019 @01:28PM
(#20731562)
Citation needed? Symmetric encryption algorithms like AES (with at least 256 bit key) are considered safe even against quantum computers, based on some reasonable math/qm assumptions.
Re:Bitcoin’s race to outrun the quantum computer
by charleslmunger on Sunday August 18, 2019 @02:16PM
(#20731853)
Yeah, so far as I know the only algorithm that provides an asymptomatic speedup (for AES or similar symmetric key crypto) over a classical computer is Grover's algorithm. That would reduce a 256 bit key to 128, which is hardly disastrous.
Re:Bitcoin’s race to outrun the quantum computer
by ridewinter on Wednesday August 21, 2019 @07:54PM
(#20763227)
All of that seems to only be “medium” secure in face of future quantum computing.
“It's been estimated that 6,681 qubits would be required to run use Grover's algorithm to break AES-256 bit encryption.”
https://www.theregister.co.uk/2019/03/14/quantum_encryption_...
Re:Bitcoin’s race to outrun the quantum computer
by zrm on Sunday August 18, 2019 @02:15PM
(#20731844)
Not only that, there are asymmetric encryption algorithms not vulnerable to Shor's algorithm, we're just not using them yet (because they're slower and haven't been as well-studied as RSA or ECC).
Re:Bitcoin’s race to outrun the quantum computer
by mikeash on Sunday August 18, 2019 @01:55PM
(#20731722)
Obvious counterexample: one-time pads.
Even if you don’t go that extreme, there’s no indication that e.g. AES is breakable.
Re:Bitcoin’s race to outrun the quantum computer
by kokx on Sunday August 18, 2019 @02:06PM
(#20731795)
What do you mean with quantum encryption? QKD (Quantum Key Distribution)?
Though the concept seems nice, it has quite a few issues in practice. Such as distance between coupled devices, and the need to have a dedicated physical communication line.
Oh and before you think you can just chain several devices to get longer distances: this opens you up to classical MitM attacks.