News for hackers. Stuff that matters.

A comment on Bitcoin’s race to outrun the quantum computer. Parent comment

Re:Bitcoin’s race to outrun the quantum computer by zazagura on Sunday August 18, 2019 @01:28PM (#20731562)
Citation needed? Symmetric encryption algorithms like AES (with at least 256 bit key) are considered safe even against quantum computers, based on some reasonable math/qm assumptions.
[ Parent | on HN ]
Re:Bitcoin’s race to outrun the quantum computer by charleslmunger on Sunday August 18, 2019 @02:16PM (#20731853)
Yeah, so far as I know the only algorithm that provides an asymptomatic speedup (for AES or similar symmetric key crypto) over a classical computer is Grover's algorithm. That would reduce a 256 bit key to 128, which is hardly disastrous.
[ Parent | on HN ]
Re:Bitcoin’s race to outrun the quantum computer by ridewinter on Wednesday August 21, 2019 @07:54PM (#20763227)
All of that seems to only be “medium” secure in face of future quantum computing.

“It's been estimated that 6,681 qubits would be required to run use Grover's algorithm to break AES-256 bit encryption.”

https://www.theregister.co.uk/2019/03/14/quantum_encryption_...

[ Parent | on HN ]
Re:Bitcoin’s race to outrun the quantum computer by zrm on Sunday August 18, 2019 @02:15PM (#20731844)
Not only that, there are asymmetric encryption algorithms not vulnerable to Shor's algorithm, we're just not using them yet (because they're slower and haven't been as well-studied as RSA or ECC).
[ Parent | on HN ]