Egregoros

Signal feed

Timeline

Post

Remote status

Context

1

@feld
Very conservative in security, and with imprinted memory of the 1st crypto war's shots, fired ... through his life.

Now, what are relative sizes of ecc vs pq keys, and what are relative computational requirements?

Wierdo needing a reality based arguments, not socially-based ones. Unlike normies?

Replies

13
@mikalai the (furry) made a comment in the IETF thread about how the hybrid won't matter "after Q-Day" which is hilarious because

a) they think Q-Day will actually happen (I don't think this is possible unless we have materials science breakthroughs)

b) they still think that MLKEM is perfect when a previous cipher (SIKE) that was a finalist ended up being broken

:laugh:

@feld
You mean hilarious that these arguments need to be addressed. This hypotheticals need to be addressed.
Isn't that arguing thingy? Just arguing. But in absence of counter arguments, the ... high commitees 👀 will say pq is enough, reducing everyone's ... strenth of signal, if I may.

@feld
I personally had a glass of wine at IQC openning. Institute for Quantum Computing that is. 20+ years ago? ...

There was heuristic argument about too much quantum clean state and dicoherence. I've stopped waiting for quantum computer.

General public doesn't quite grasp a physical meaning of physicists' words, that we don't get quantum, despite all these calculations.

This is what you also discuss in quantum computation class ... before opening IQC.

@mikalai I always get responses like

"but we've had exponential improvements in the last few years!"

"I've actually written math libraries for quantum computers (that they have never run on, because they don't exist)"

"you can actually rent (totally not living up to the hype) quantum CPUs right now from Amazon etc to do work with!"


*BIG YAWN*
@sun @mikalai probably to help them build a foundation for how to leverage them fully if they ever become capable. They could possibly simulate an equally slow / incapable traditional CPU so they could directly compare them on different tasks and try to prematurely optimize some algorithms on the quantum so it's just ready to drop in and go I guess?