So you're suggesting that someone else invests his time into switching
the current code to experimental/inefficient algorithms in order to
protect against something that *might* be a threat in the "next couple
of years"?

I've got news for you: our current crypto is inadequate for dealing
with threats that are real *today*. The plan is to deal with these
first... and then maybe consider others.

I am highly sceptical that we will have the resources and will want to
pay the performance cost of switching to PQ-proof crypto in the
foreseeable future. There might be limited area where we can do it (PQ-
proof DH sounds like something we could do)... but no one is currently
working on it.

Florent

On Fri, 2016-05-06 at 12:23 +0200, [email protected] wrote:
> Okay, clarification:
> I am not a programmer.
> I suggest that the crypto, which is encapsulated in the Freenet core
> layer ("fred"),
> gets replaced with PQ Crypto algorithms by https://pqcrypto.org/ ,
> just as TOR is
> doing the same by version 0.2.9.x , because fully functional quantum
> computers
> will lever out all classical crypto and are expected to be invented
> in the next couple
> of years.
> 
> Greetings,
> Torben Lechner
> 
> 
> --- Ursprüngliche Nachricht ---
> Von: Florent Daigniere <[email protected]>
> Datum: 06.05.2016 12:02:22
> An: [email protected]
> Betreff: Re: [freenet-dev] Post-quantum cryptography, was: Re: RFC:
> My Web  of Trust bachelor's thesis / developer's manual
> 
> > 
> > I am not sure that I understand what you are suggesting here...
> > Which part of the crypto do you want to change and why?
> > 
> > Florent
> > 
> > On Fri, 2016-05-06 at 10:29 +0200, [email protected] wrote:
> > > 
> > > Yesterday Whonix developer tweeted a sub website of Whonix where
> > > Whonix and Tor position
> > > to post quantum cryptography was briefly explained. The Tor
> > > Project
> > > 
> > > are planning to
> > > migrate to quantum resistant ciphers by version 0.2.9.x –
> > > currently
> > > 
> > > the Tor Project is at
> > > version 0.2.8.2: https://www.whonix.org/wiki/PQCrypto
> > > 
> > > --- Ursprüngliche Nachricht ---
> > > Von: [email protected]
> > > Datum: 30.04.2016 02:00:05
> > > An: Discussion of development issues <[email protected]>
> > > 
> > > Betreff: [freenet-dev] Post-quantum cryptography,         was:
> > > Re:
> > > RFC: My Web of Trust bachelor's thesis / developer's manual
> > > 
> > > > 
> > > > 
> > > > On Saturday, April 30, 2016 01:20:56 AM [email protected]
> > > > wrote:
> > > 
> > > > 
> > > > > 
> > > > > 
> > > > > Warning: Non-techie speaking. ;)
> > > > > 
> > > > > Briefly seen through your work.
> > > > > Regarding considering improvements for the future, maybe it's
> > a
> > > 
> > > > 
> > > > > 
> > > > > good
> > > > idea to
> > > > > 
> > > > > 
> > > > > also concider the prospect of exchanging freenet's/WOTs
> > > > > crypto
> > > 
> > > > 
> > > > > 
> > > > > algorithm
> > > > > 
> > > > > with post-quantum cryptography solutions figured out by
> > > > > pqcrypto.org
> > > > . It
> > > > > 
> > > > > 
> > > > > probably won't make the used algorithm process faster than
> > it is
> > > 
> > > > 
> > > > > 
> > > > > now,
> > > > but
> > > > > 
> > > > > 
> > > > > would highen the user's tolerance for waiting relative long.
> > Then
> > > 
> > > > 
> > > > > 
> > > > > users
> > > > > 
> > > > > would thing 'gosh, that lasts long, but hey, it's quantum
> > secure,
> > > 
> > > > 
> > > > > 
> > > > > so
> > > > what
> > > > > 
> > > > > 
> > > > > do you want...'. I mean we have the year 2016 now and reports
> > > 
> > > > 
> > > > > 
> > > > > from
> > > > > australia present the prospect of 2018 to be the year in
> > > > > which
> > > 
> > > > 
> > > > > 
> > > > > the
> > > > first
> > > > > 
> > > > > 
> > > > > universal quantum computer will be ready.
> > > > > 
> > > > > Here's a great introduction video for what pqcrypto is doing
> > to
> > > 
> > > > 
> > > > > 
> > > > > make
> > > > sure
> > > > > 
> > > > > 
> > > > > we'll also have secure systems when the era of universal
> > > > > quantum
> > > 
> > > > 
> > > > > 
> > > > > computers
> > > > > 
> > > > > starts. Title: djb, Tanja Lange: PQCHacks
> > > > > Video link: https://youtu.be/-LlkJZJ5DMQ
> > > > > discription: A gentle introduction to post-quantum
> > > > > cryptography
> > > 
> > > > 
> > > > > 
> > > > > This is a talk of the cutting edgy group working on securing
> > > 
> > > > 
> > > > > 
> > > > > working
> > > > crypto
> > > > > 
> > > > > 
> > > > > in post-quantum era (starting btw. 2018-2027). A lot of smart
> > > 
> > > > 
> > > > > 
> > > > > heads
> > > > meet
> > > > > 
> > > > > 
> > > > > every year for this and this talk sums up the status quo,
> > gives a
> > > 
> > > > 
> > > > > 
> > > > > preview
> > > > > 
> > > > > into the future and provides useful information for
> > > > > implementing
> > > 
> > > > 
> > > > > 
> > > > > practical
> > > > > 
> > > > > (but not optimal) post-quantum cryptography solutions right
> > now.
> > > 
> > > > 
> > > > > 
> > > > > 
> > > > > Most recent infos of pqcrypto: Their 2016 conference, which
> > took
> > > 
> > > > 
> > > > > 
> > > > > place
> > > > 2
> > > > > 
> > > > > 
> > > > > months ago - https://pqcrypto2016.jp/
> > > > Thanks! WoT does not do any cryptography at all, crypto is
> > > > fully
> > > 
> > > > 
> > > > encapsulated
> > > > 
> > > > in the Freenet core layer ("fred"). I currently do not
> > work on
> > > 
> > > > 
> > > > that.
> > > > 
> > > > Thus, if you want to get this noticed, you should start a
> > > > separate
> > > 
> > > > 
> > > > thread.
> > > > 
> > > > _______________________________________________
> > > > Devl mailing list
> > > > [email protected]
> > > > https://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl
> > > _______________________________________________
> > > Devl mailing list
> > > [email protected]
> > > https://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl
> _______________________________________________
> Devl mailing list
> [email protected]
> https://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
Devl mailing list
[email protected]
https://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to