How to compute a 256 bit elliptic curve key with 50M Toffoli gates

Re:How to compute a 256 bit elliptic curve key with 50M Toff... by upofadown on Monday June 19, 2023 @08:40AM (#36390397)

Forward secrecy does not provide any value against cryptography compromise. Quite the opposite as it depends on the security of the cryptography over the long term to insure old messages stay inaccessible.

The session keys are exchanged by the asymmetrical systems that the imagined quantum computer would be able to break. So the attacker gets the session keys directly.

[ Parent | on HN ]

Re:How to compute a 256 bit elliptic curve key with 50M Toff... by bawolff on Monday June 19, 2023 @04:58PM (#36396366)

I mean, it depends a little bit on what your threat model is. If it takes a week to break a key, and you have hundreds of thousands of tls sessions without knowing which is the relavent one, it is definitely something. But yeah it seems like it would quickly become a minor hurdle once real quantum computers become a thing and presumably have their own moore's law.

[ Parent | on HN ]