Helvede

0 posts0 participants0 posts today

Alexander Hansen FærøyThis is undoubtedly the most promising Post-Quantum TLS deployment situation I have seen for <a href="https://mastodon.social/tags/Tor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tor</a> since we started discussing it more actively in the team. Very exciting!I hope that OpenSSL 3.5, when released, will make it into <a href="https://mastodon.social/tags/Debian" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Debian</a> Trixie. That would make deployment of this so much more snappy and easy for the Tor network to upgrade, but that may be dreaming. The timelines here look quite difficult for that to happen, but let's hope.<a href="https://mastodon.social/tags/cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptography</a> <a href="https://mastodon.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a> <a href="https://mastodon.social/tags/pqcrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqcrypto</a>

Soatok DreamseekerI must admit, I'm not in love with HQC but I think it's a good backup choice if ML-KEM is ever broken.McEliece public keys would have broken my use cases.<a href="https://furry.engineer/tags/pqcrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqcrypto</a>

Fiona :transbian: :autism:<a href="https://blahaj.zone/tags/NIST" rel="nofollow noopener noreferrer" target="_blank">#NIST</a> chose <a href="https://blahaj.zone/tags/HQC" rel="nofollow noopener noreferrer" target="_blank">#HQC</a> as their backup KEM and elected not to standardize <a href="https://blahaj.zone/tags/ClassicMcElice" rel="nofollow noopener noreferrer" target="_blank">#ClassicMcElice</a> for now among other reasons pointing to the standardization with <a href="https://blahaj.zone/tags/ISO" rel="nofollow noopener noreferrer" target="_blank">#ISO</a>. The argument to choose HQC over Bike is a higher confidence in IND-CCA-security of HQC. I cannot comment on whether that is a reasonable assessment, though I have no reason to doubt it, but I can say that in terms of reasons to make a choice this is of course a pretty good one. I’m not sure how I think about the decision regarding McElice, but I can to an extend see where they are coming from. This means there are now 9 post quantum algorithms approved, standardized or chosen for standardization by generally respected organizations: Key Encapsulation Mechanisms (“KEMs”): * ML-KEM (“Kyber”), based on Lattices, standardized by NIST * HQC, based on Codes, chosen for standardization by NIST * Classic McElice, based on codes, approved by BSI (de), ANSSI(fr), and NCSC (nl) * Frodo, based on lattices, approved by BSI (de), ANSSI(fr), and NCSC (nl) Signatures: * ML-DSA (“Dilithium”), based on Lattices, standardized by NIST * SLH-DSA (“SPHINCS+”), based on hashes, standardized by NIST * FN-DSA (“Falcon”), based on lattices, chosen for standardization by NIST Stateful Signatures: * XMSS, based on hashes, standardized by IEEE * LMS, based on hashes, standardized by IEEE Overall, this looks like a decent portfolio. Future standardization might add schemes based on multivariate-equations and isogonies, but for now this should do and give us a basis from which we can design more efficient schemes without being to concerned about the entire ground suddenly giving in because one random guy/gal finds a new attack-vector. <a href="https://blahaj.zone/tags/postquantumcryptography" rel="nofollow noopener noreferrer" target="_blank">#postquantumcryptography</a> <a href="https://blahaj.zone/tags/PQC" rel="nofollow noopener noreferrer" target="_blank">#PQC</a> <a href="https://blahaj.zone/tags/PQCrypto" rel="nofollow noopener noreferrer" target="_blank">#PQCrypto</a>

Fiona :transbian: :autism:So looking through some old projects I’ve had lying around, I ran into something I started (and never even really wrote anything) about steganography. This led me down a bit of rabbit-hole and I now have a slightly better understanding of some components of ML-KEM (aka. <a href="https://blahaj.zone/tags/Kyber" rel="nofollow noopener noreferrer" target="_blank">#Kyber</a>). Both the public key and the ciphertext are for the most part long sequences of integers modulo 3329 that are effectively indistinguishable from random integers out of that range. Of course they are obvious to distinguish from random bitstrings, but the easiest way to fix that would be to just view them as numbers in base 3329, re-encode them to base 2 and work from there… So that might be one thing I could look into now. The alternative is to see whether there is a sufficiently hard to detect way to change some of the representatives of the field-elements… It might be easier to implement if, if not easier from a mathematical perspective, but would also let the possibility of slightly compressing the public-key and ciphertext by about 2.5% in length lie on the table. In any case, this is something that might be worthwhile for practical use-cases… 🤔 <a href="https://blahaj.zone/tags/cryptography" rel="nofollow noopener noreferrer" target="_blank">#cryptography</a> <a href="https://blahaj.zone/tags/pqc" rel="nofollow noopener noreferrer" target="_blank">#pqc</a> <a href="https://blahaj.zone/tags/pqcrypto" rel="nofollow noopener noreferrer" target="_blank">#pqcrypto</a> <a href="https://blahaj.zone/tags/steganography" rel="nofollow noopener noreferrer" target="_blank">#steganography</a> <a href="https://blahaj.zone/tags/crypto" rel="nofollow noopener noreferrer" target="_blank">#crypto</a> <a href="https://blahaj.zone/tags/MLKEM" rel="nofollow noopener noreferrer" target="_blank">#MLKEM</a>

🏳️‍⚧️ Fiona :flag_lesbian:Pushing my “let’s stop pretending post-quantum crypto is something fundamentally different from regular crypto and acknowledge that it really is just the replacement of broken algorithms with secure ones”-agenda in the intro of the paper I’m co-writing. 😈<a href="https://tech.lgbt/tags/itsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsecurity</a> <a href="https://tech.lgbt/tags/cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptography</a> <a href="https://tech.lgbt/tags/crypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#crypto</a> <a href="https://tech.lgbt/tags/postquantumcryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#postquantumcryptography</a> <a href="https://tech.lgbt/tags/quantumcomputing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#quantumcomputing</a> <a href="https://tech.lgbt/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a> <a href="https://tech.lgbt/tags/pqcrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqcrypto</a>

Harry Sintonen<a href="https://infosec.exchange/tags/OpenSSH" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSSH</a> 9.9 has been released: <a href="https://www.openssh.com/txt/release-9.9" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.openssh.com/txt/release-9.9</a>The significant new feature is support for post-quantum mlkem768x25519-sha256 KEX as specified in <a href="https://datatracker.ietf.org/doc/html/draft-kampanakis-curdle-ssh-pq-ke-03" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://datatracker.ietf.org/doc/html/draft-kampanakis-curdle-ssh-pq-ke-03</a> <a href="https://infosec.exchange/tags/pqcrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqcrypto</a> <a href="https://infosec.exchange/tags/postquantumcryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#postquantumcryptography</a>

hannoIt appears lattices are still fine <a href="http://www.chenyilei.net/" rel="nofollow noopener noreferrer" translate="no" target="_blank">http://www.chenyilei.net/</a> <a href="https://mastodon.social/tags/pqcrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqcrypto</a>

Recent searches

Search options

Administered by:

Server stats:

#pqcrypto