Re: Danger Will Robinson ! Aussies Invent Gigabit Quantum-Computing Method, ALL Encryption At Risk SOON

Path	csiph.com!weretis.net!feeder6.news.weretis.net!usenet.blueworldhosting.com!feed1.usenet.blueworldhosting.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!feeder.usenetexpress.com!tr1.iad1.usenetexpress.com!69.80.99.26.MISMATCH!Xl.tags.giganews.com!local-2.nntp.ord.giganews.com!nntp.earthlink.com!news.earthlink.com.POSTED!not-for-mail
NNTP-Posting-Date	Mon, 16 Jan 2023 05:48:32 +0000
Subject	Re: Danger Will Robinson ! Aussies Invent Gigabit Quantum-Computing Method, ALL Encryption At Risk SOON
Newsgroups	comp.os.linux.misc
References	<-ZCcnXkzqKzxoF_-nZ2dnZfqn_ednZ2d@earthlink.com> <wwvilh9e4h2.fsf@LkoBDZeT.terraraq.uk> <Prucnd4yxpPSp17-nZ2dnZfqnPednZ2d@earthlink.com> <wwva62jrf55.fsf@LkoBDZeT.terraraq.uk>
From	"26C.Z968" <26C.Z968@noaada.net>
Date	Mon, 16 Jan 2023 00:48:13 -0500
User-Agent	Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.13.0
MIME-Version	1.0
In-Reply-To	<wwva62jrf55.fsf@LkoBDZeT.terraraq.uk>
Content-Type	text/plain; charset=utf-8; format=flowed
Content-Language	en-US
Content-Transfer-Encoding	8bit
Message-ID	<8gOdnRB1c4OteFn-nZ2dnZfqnPSdnZ2d@earthlink.com> (permalink)
Lines	41
X-Usenet-Provider	http://www.giganews.com
NNTP-Posting-Host	68.222.41.46
X-Trace	sv3-KOBp58DzNsNeGv4HmAy/6R91RwPSWA1V8U6TSEt59pHE7nim/mAVF2B/OJL5kTY5zQB+32t92gojvN+!ZGswi11cN9GOp+xqXWencQ122gTuxB8teC5TtctDonMXNpr1/8HqV7HEoo/1LDxuNnE6GhQ1mkvL!Atv7ApkeL2b+fxR5mlA=
X-Abuse-and-DMCA-Info	Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info	Otherwise we will be unable to process your complaint properly
X-Postfilter	1.3.40
X-Received-Bytes	3424
Xref	csiph.com comp.os.linux.misc:36701

Show key headers only | View raw

On 1/15/23 10:28 AM, Richard Kettlewell wrote:
> "26C.Z968" <26C.Z968@noaada.net> writes:
>> On 1/14/23 6:32 AM, Richard Kettlewell wrote:
>>> Quantum-safe replacements for asymmetric schemes are well underway. You
>>> can use LMS/HSS and XMPP today, though you will need to think carefully
>>> about state management, and IIRC some requirements to use LMS are coming
>>> down the line in certain contexts. Looking further ahead several
>>> stateless schemes are currently undergoing standardization. We don’t
>>> know when a CRQC will be built but both standards/compliance bodies and
>>> implementors are taking the prospect very seriously.
>>> [1] assuming correct implementation, absence/mitigation of side
>>>       channels, proper use of authenticated encryption - all the stuff we
>>>       already need for a block cipher anyway.
>>
>>    Symmetric block ciphers are good for protecting files ... but
>>    the SSL that gets them from a server to your PC is an asymmetric
>>    scheme. qPCs might do well with MIM attacks ... meaning the 's'
>>    in https becomes a joke.
> 
> That’s what the quantum-safe asymmetric schemes are for.

   Yea ... but gotta DO them, STANDARDIZE/CERTIFY/DEPLOY them .....

   Ain't seen THAT yet.

   And "a few years" may not be soon ENOUGH.

   There are 'intermediate fixes' ... just ASSUME https is
   NOT gonna be totally secure and never transmit files
   or bits thereof in the clear assuming https is gonna
   take care of things. Final decryption would have to
   be shifted to LOCAL PCs. When you look at ANY bits of
   a database - yer account/login stuff at Google for
   instance - using a browser it would only SEEM to be
   clear text ... but instead go thru an additional
   symmetric decryption step on yer PC.

   Quantum-resistant https/TLS is badly needed now, but
   WHEN will we see it ??? When is there 'httpq' ???

   See what I'm aiming at ?

Thread

csiph-web