Post B520oOJlFvCjcWd2JM by neverpanic@chaos.social
(DIR) More posts by neverpanic@chaos.social
(DIR) Post #B51ynbmzU4OZCfndCq by filippo@abyssdomain.expert
1 likes, 0 repeats
Two papers came out last week that suggest classical asymmetric cryptography might indeed be broken by quantum computers in just a few years.That means we need to ship post-quantum crypto now, with the tools we have: ML-KEM and ML-DSA. I didn't think PQ auth was so urgent until recently.https://words.filippo.io/crqc-timeline/
(DIR) Post #B51ynbz2lG2Jo3RFzc by feld@friedcheese.us
1 likes, 0 repeats
@filippo > If you are thinking “well, this could be bad, or it could be nothing!” I need you to recognize how immediately dispositive that is. The bet is not “are you 100% sure a CRQC will exist in 2030?”, the bet is “are you 100% sure a CRQC will NOT exist in 2030?”How big is the physical computer going to be? What are the power requirements going to be?Is this going to be a quantum CPU that doesn't need its temperature and voltage meticulously managed to prevent qubits from changing?How many of these are we going to be able to manufacture per year?If real, this is a super serious threat. Where are our sanctions to prevent the breakthroughs from being picked up by e.g., China? Shouldn't this be guarded like nuclear secrets? It was too dangerous for them to have Nvidia GPUs but zero policies about quantum computing as far as I know?
(DIR) Post #B51yoIuFAykMvcWWyu by mischievoustomato@tsundere.love
0 likes, 0 repeats
@feld @filippo with orange retard in place, don't expect much
(DIR) Post #B520RBipv5EXtaIF72 by sun@shitposter.world
1 likes, 0 repeats
@feld @filippo the implementations are actually being hidden, they are proving the advances using riscv zkproofs rather than releasing the mechanism. everyone is in fact keeping how they're doing it a secret so foreign governments can't pick it up.
(DIR) Post #B520h97VMVc2SURPN2 by agreeable_landfall@mastodon.social
1 likes, 0 repeats
@filippo @robpike Here's an NSA publication on this topic, from 10 years ago. What I love about this is how they describe their requirements: they have to field systems and guarantee their security for 30 years into the future.https://archive.org/details/cnsa-suite-and-quantum-computing-faq/mode/2up
(DIR) Post #B520i8kGF1rJaM2ikS by ohir@vivaldi.net
1 likes, 0 repeats
@filippo > In symmetric encryption, we don’t need to do anything, thankfullyOk. So the IoT garden must rewind to the Kerberos or physical provisioning. I can't imagine lattices on small silicon yet.Thank you, Filippo.
(DIR) Post #B520oOJlFvCjcWd2JM by neverpanic@chaos.social
0 likes, 0 repeats
@filippo Couldn't agree more with "the bet is 'are you 100% sure a CRQC will NOT exist in 2030?'" — and I'd also add the operational perspective: "are you 100% sure you've found and replaced every Debian oldoldstable and RHEL 8 box that doesn't support PQC by 2030?"
(DIR) Post #B520oOUOcNiA9VbWt6 by filippo@abyssdomain.expert
1 likes, 0 repeats
@neverpanic oh Debian oldstable is not gonna make it. stable might not make it! I have a secret, over-optimistic wish that this will kill the "constantly run software 3-5 years out of date" model of distribution, and free us upstreams from having to deal with its fallout, but I know it won't.
(DIR) Post #B522l560SvTB2okDGy by feld@friedcheese.us
1 likes, 0 repeats
@sun @filippo maybe not everyone, my wife has a client who is a Microsoft employee who seems to talk way too much about their quantum research lol
(DIR) Post #B522qF2AwWXlJbPfjE by sun@shitposter.world
0 likes, 0 repeats
@feld @filippo I didn't know your wife was a Chinese honeypot
(DIR) Post #B523TUHCCrCjsk9WQS by feld@friedcheese.us
1 likes, 0 repeats
@sun @filippo I'll tell her to ask how many qubits they got at the next appointment