News for hackers. Stuff that matters.

A comment on Java implementation of a quantum computing resistant cryptographic algorithm. Parent comment

Re:Java implementation of a quantum computing resistant cryp... by forgotpwd16 on Tuesday October 24, 2023 @06:04AM (#37996873)
Isn't it possible to decouple the two components, that is break the post-quantum one on classical computer and the classical one on a quantum computer, essentially making this combination null?
[ Parent | on HN ]
Re:Java implementation of a quantum computing resistant cryp... by mthiim on Tuesday October 24, 2023 @06:35AM (#37997072)
Yes absolutely: If both security elements fail (quantum computers that break classical crypto appear, and the supposed post-quantum element turns out to be insecure as well) then you're screwed. By combining you get a chain is as strong as the strongest link - but not stronger! The motivation with combining is to avoid a scenario where you start using a new post-quantum algorithm which turns out to be really insecure (like happened to SPHINCS+) so you're actually worse off.
[ Parent | on HN ]