News for hackers. Stuff that matters.
Re:Toshiba reports milestone in quantum cryptography by cryptonector on Friday August 27, 2021 @01:11PM (#28330386)
QKD is trivially vulnerable to MITMs who have compatible QKD devices. QKD is only immune to eavesdroppers and active attacks by attackers who don't have QKD compatible devices.

QKD only works for point-to-point links.

If PQ happens and we have no PQ classical asymmetric algorithms, QKD cannot save us. We do not have time to rebuild the Internet around hop-by-hop security in a world of QKD, and anyways, QKD can be trivially MITMed, so this just doesn't work.

Fortunately we do have some PQ classical algs. Fortunately we're not in a PQ world yet. If we end up being unfortunate (PQ happens before we deploy PQ classical algs) then QKD cannot help us.

> I don't think it's that generally interesting, but if you already have dedicated private fiber between your super secret secure facilities, -- why not?

Because I might as well use classical symmetric keying and not worry about PQ.

Re:Toshiba reports milestone in quantum cryptography by nullc on Sunday August 29, 2021 @06:36AM (#28345665)
> Because I might as well use classical symmetric keying and not worry about PQ.

In that case the attacker could potentially compromise your security with an analysis breakthrough on the symmetric cipher, and a passive (e.g. bend the fiber a bit and see the light that comes out the side) attack.

The QCD requires an active attack, you have to actually insert active equipment into the line, not just peel off some stray photons.

So assume you're already using multiple layers of independently keyed state of the art cryptography, and still have money left over in your link security budget...

How much is it worth to you to make it so that attackers have to insert equipment vs just siphon off a bit of extra light with a tiny bend in the fiber (assuming they have space alien grade mathematical breakthroughs)?

It's probably worth more than nothing.

Now, I would agree that any who is promoting this stuff with claims greater than "probably worth slightly more than nothing" is misleading people.

And as an area of pure research it gives us a lot of room to learn about practical realizations of quantum-sensitive systems, optics, photonics, electronics, etc. There is plenty of research with no known practical application at all. Having a really minor application isn't a great sin.

Re:Toshiba reports milestone in quantum cryptography by freemint on Saturday August 28, 2021 @10:11AM (#28338220)
You are ignoring one important aspect, namely timing. The speed of light is well known so if the latency suddenly increases when accessing information that is not available at the MITM you know the connection is compromised.
Re:Toshiba reports milestone in quantum cryptography by cryptonector on Saturday August 28, 2021 @07:35PM (#28342545)
Well, so how much latency would an MITM add? If it's small enough, then forget it, this won't do.
Re:Toshiba reports milestone in quantum cryptography by freemint on Saturday August 28, 2021 @08:34PM (#28342892)
If think the sender can force an arbitrary latency in decoding with a signal with noise added but i might be wrong. If the MITM sends a signal before the measurement is complete (ccertainty that the noise is leaning one way is above threshold) he either produces unlikely signals (detectable, since all the information is sent after the decode, htus the signals entropy will vay with time n a stair step way) or he occasionally transmits a wrong signal.