Post #1465812
2026-04-20 16:28 UTC
Replies (3)
-
@jaseg@chaos.social 2026-04-20 17:05
@filippo@abyssdomain.expert I feel like this misunderstanding is one of the main reasons why quantum key distribution systems have received so much attention. They’re only really relevant if you assume symmetric cryptography has been broken, otherwise in most applications you can replace a qkd system with a classical KDF and a guy carrying over a key once.
-
@gmacon@indieweb.social 2026-04-20 17:26
@filippo@abyssdomain.expert Thanks for writing this! I was one of those people thinking that doubling the key size would be required, and I continued to think that even after learning the math behind Grover's Algorithm because that explanation didn't draw attention to the fact that the rounds can't be parallelized (though, now that it's been pointed out, it's "obvious").
-
@neverpanic@chaos.social 2026-04-20 18:45
@filippo@abyssdomain.expert Unfortunately CNSA 2.0 also asks for SHA-512 over SHA-256, and that's in fact a major hassle and is wasting time, because we're looking at making the container ecosystem add support for that. Your point of the birthday problem and their target of 256bit security at least explains that (in a way that NSA's own documentation doesn't), but it's still a pity we're wasting time on this.