topic Re: Analyzing the NSA/GCHQ arguments against hybrids. #nsa #quantification #risks #complexity #costs in Tech Talk

Analyzing the NSA/GCHQ arguments against hybrids. #nsa #quantification #risks #complexity #costs

Caute_cautim — Thu, 07 Mar 2024 23:57:27 GMT

HI All

Most post-quantum implementations, including Apple's PQ3, rely on a hybrid of traditional and PQC algorithms. So why are governments in the US and the UK still lukewarm on this concept?

In January, Daniel Bernstein posted an interesting blog with his views. It's worth reading if you're building a quantum-safe system and are debating whether to go hybrid or not.

For those new to Bernstein's writing: brace yourself for conspiracy-theory vibes and plentiful jabs at NIST, the NSA, and allied organisations (like GCHQ). Yet, there is wisdom in what he writes. He carefully dissects the arguments against using hybrid modes and finds them wanting.

https://blog.cr.yp.to/20240102-hybrid.html

Regards

Caute_Cautim

Re: Analyzing the NSA/GCHQ arguments against hybrids. #nsa #quantification #risks #complexity #costs

Early_Adopter — Fri, 08 Mar 2024 00:01:42 GMT

“Here, I know math, let me help you with that stuff…” 😉

https://www.wired.com/2007/11/securitymatters-1115/

Re: Analyzing the NSA/GCHQ arguments against hybrids. #nsa #quantification #risks #complexity #costs

Caute_cautim — Fri, 08 Mar 2024 01:06:59 GMT

@Early_Adopter. Except you have top subscribe to Wired....

Regards

Caute_Cautim

Re: Analyzing the NSA/GCHQ arguments against hybrids. #nsa #quantification #risks #complexity #costs

Early_Adopter — Fri, 08 Mar 2024 01:11:54 GMT

Just don’t use it that much..? Then it’s freesies!

Here’s the authors take on his blog:

https://www.schneier.com/essays/archives/2007/11/did_nsa_put_a_secret.html