@jornfranke@social.anoxinon.de
Post #1202065
2026-04-06 17:57 UTC
@filippo Quote from a paper that you cite: ", our most
time-efficient architectures can potentially enable run-
times of 10 days for ECC–256 with ≈ 26,000 qubits, and
97 days for RSA–2048 with ≈ 102,000 qubits"
This is for one key! If all "substantial engineering challenges" are solved.
It was not the scope of your post, but a broader assessment at Confidentiality, Integrity, Availability risks with some concrete estimations would help (which is maybe more a job for a IT Security Risk Manager).
Replies (2)
-
@filippo@abyssdomain.expert 2026-04-06 18:02
@jornfranke I encourage you to reread the article because it addresses all your objections, especially the "why did they not break a small key". I will add that the cryptography experts are actually very confident in the security of lattices. https://keymaterial.net/2025/12/13/a-very-unscientific-guide-to-the-security-of-various-pqc-algorithms/
-
@yacc143@mastodon.social 2026-04-07 05:00
@jornfranke And where are we in the usable qubits race? @filippo