Quantum frontiers may be closer than they appear

The day when a quantum computer can crack commonly used forms of encryption is drawing closer. The world isn’t prepared, experts say.

The day when a quantum computer can crack commonly used forms of encryption is drawing closer. The world isn’t prepared, experts say.

In #35, I ruled that there was no immediate need for post-quantum signatures. I had evaluated ML-DSA, HashML-DSA, and hybrid constructions (i.e., with Ed25519). Recently, there has been a bunch of ...

Neha Narula

The funny thing about safety blankets is they can double as stage curtains for security theater. Art: CMYKat “When will a cryptography-relevant quantum computer exist?” is a question ma…

Craig Gidney's computer science blog

Neha Narula

Sometimes, I do a pretty good job at spotlighting a future issue – though sometimes it happened so long ago I have to remind myself what I actually wrote initially. I do feel overall like some of my older writings are more valuable than recent entries, so when there is Continue Reading

Recent developments have the cryptography world on alert, fearing a quantum computer capable of breaking public key cryptography is imminent. Unbeknownst to me, my blog is already protected.

Last year, my position was that we still had time to design PQ authentication mechanisms. Now, based on the pace of progress and on statements like Google's, I believe: 1. we need to finish rolling out PQ key exchange yesterday 2. we need to start rolling out PQ auth now 3. it's too late to ship any new non-PQ design or system https://blog.google/innovation-and-ai/technology/safety-security/cryptography-migration-timeline/

Professional website of Sam Jaques

Google has shortened its timeline for migrating to post-quantum cryptography, targeting 2029 to secure systems.

The risk that cryptographically-relevant quantum computers materialize within the next few years is now high enough to be dispositive, unfortunately.