Re:Toshiba reports milestone in quantum cryptography
by dandanua on Thursday August 26, 2021 @12:43PM
(#28317286)
Yes, but what if you want to generate a new secret key? You can encrypt it and send through a channel. But, in theory, an eavesdropper can capture it and decrypt at some point in future. In QKD an eavesdropper is absolutely helpless, he can't capture traffic at all (it will be ruined otherwise).
Re:Toshiba reports milestone in quantum cryptography
by bsza on Thursday August 26, 2021 @01:33PM
(#28317914)
But the same applies to the messages themselves, no? QKD is only for key exchange, so I assume the resulting keys themselves are just random (non-quantum) bits of data, and the encrypted messages are sent through plain old TCP/IP. If a message is intercepted, the same tactics of waiting until the encryption is no longer secure could work.
Re:Toshiba reports milestone in quantum cryptography
by dandanua on Thursday August 26, 2021 @02:19PM
(#28318550)
I thought about the scenario when some old secret key is revealed. Sure, you can decrypt old messages with it if they were transmitted classically. But in a classical channel if you're capturing all the traffic then you can derive the current secret key and decrypt current messages as well. This is not possible in a quantum case.
Re:Toshiba reports milestone in quantum cryptography
by bsza on Thursday August 26, 2021 @05:02PM
(#28320722)
What if you store a large number of keys on the module right from the start, and get all the new keys from that list. That way the key switch message only needs to contain the index of the new key. Even better, store a huge random seed and generate all subsequent keys from that. Then you can also change key size and algorithm as needed without ever having to meet your contact in person again.
Re:Toshiba reports milestone in quantum cryptography
by cryptonector on Thursday August 26, 2021 @10:40PM
(#28323747)
Not just a symmetric key, but probably also ECDH and RSA keys.
To trust that (without PKI), you have to meet your peer in person, don't you? If so, at that point you can just hand an HSM to them with your symmetric key on it. No need to use a quantum device.