Post #1710982
2026-04-19 06:01 UTC
@gregprice @djb my understanding of their logic is that they actually believe quantum computing is just around the corner and that ECC is already essentially worthless. This is not my opinion. More generally, I think it is poor risk management to not consider a wider range of possible futures.
Replies (1)
-
@gregprice@sfba.social 2026-04-19 22:55
@Elliptickiwi @djb Yeah, I think that's the most plausible argument for dismissing hybrid crypto. If practical QC for cryptanalysis comes very soon, then layering on ECC or any other non-PQ crypto won't be of any use. So if you're real sure of that timeline, then you may as well skip it. (I agree with you and Dan that that level of certainty seems unwise. Even if one thinks that timeline is 80% likely, then cheap measures that maintain security in the 20% case are worthwhile.) Even then, though, I don't see what the HNDL story has to do with it. For one thing, in that world, the QC means the non-PQ layer is easy for the adversary to "decrypt later".