Dear list, I hate to contribute to the recent flood of PQC posts, but I think it’s an important issue that’s worth discussing.
In particular, what I usually see is various competing proposals without a clear winner. So I’d like to bring everyone’s attention to this new post from Blockstream: https://blog.blockstream.com/schnorr-but-with-vectors-lattice-based-signatures-explained/ This post is interesting because unlike a lot of PQC discussions, it actually includes a comparison table of various approaches, where lattices seem to come out ahead. This raises a few questions. Since lattices are not a new topic in cryptography, why has Blockstream focused their efforts on hash-based approaches so far? Are hashes seen as a more conservative choice? Given the problems with hashes outlined in the post, are lattices actually the current most likely candidate for a PQC implementation? If so, should the community effort be focused on lattices instead of other proposals? Or is the comparison table not telling the whole story? I’d like to hear your thoughts on the topic. Thanks, Nikita -- You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/ffa56d63-32c6-4fc3-a150-4fe62ac2e00b%40app.fastmail.com.
