Talk:Post-quantum cryptography

Cryptography without/before PKC

Distinct from the research into public-key crypto, there's history and research about the practicalities of living *without* the mathematical/complexity assumptions that underlie most PKC: key negotiation including via multiple third parties, hash signatures, etc. Don't have the round tuits quite yet (and it doesn't really belong in this specific article), but throwing it out there if it piques anyone else's interest.

Rationale for no link to PQ companies.

I'm unfamiliar with how to mention some user such as 46.249.209.132, someone please modify this and help me out with a link on my user talk page.

Post-quantum cryptography (and anything with the word "quantum" in it) are at the frontier of technological advancement. Any mention to an entity who claim to specialize in such field would be strongly misleading and biased endorsement.

post-quantum.com may indeed be a PQ company, but Security Innovation and its subsidiaries (if I'm not mistaken) had specialized in NTRU for perhaps far longer than most other people, yet we still do not give them mention on this page. — Preceding unsigned comment added by Dannyniu (talk • contribs) 02:09, 11 September 2016 (UTC)

standardization section?

i suggest to create a section about the ongoing efforts to collect, select and/or standardize PQ primitives. there is an european group led by tanja lange: https://pqcrypto.eu.org/ https://www.tue.nl/en/university/news-and-press/news/23-04-2015-tanja-lange-leads-multi-million-euro-project-to-protect-data-against-quantum-computers and there is the NIST QC project http://csrc.nist.gov/groups/ST/post-quantum-crypto/ maybe i can put in some work, but not anytime soon Krisztián Pintér (talk) 22:19, 10 April 2017 (UTC)

Code-Based Cryptography variant McEliece-QC-MDPC Codes insecure

The variant of the McEliece cryptosystem using Quasi-Cyclic Moderate-Density Parity-Checks is mentioned in this article, therefore stating that this is (still) a viable candidate for Post-Quantum Cryptography. However, a key-breaking attack has been developed by Qian Guo, Thomas Johansson and Paul Stankovski (from Lund University in Lund, Sweden). They discuss their attack in their paper named: A Key Recovery Attack on MDPC with CCA Security Using Decoding Errors. This variant is therefore not anymore a viable candidate for Post-Quantum Cryptography. Markovisch (talk) 05:09, 20 April 2017 (UTC)

This is likely better mentioned on the page for the McEliece cryptosystem. At this point "Classic McEliece" is the big target, since that is a competitor in the NIST's Post-Quantum Cryptography Standardization project. 74.104.188.4 (talk) 16:01, 3 March 2018 (UTC)

External links modified

Hello fellow Wikipedians,

I have just modified one external link on Post-quantum cryptography. Please take a moment to review my edit. If you have any questions, or need the bot to ignore the links, or the page altogether, please visit this simple FaQ for additional information. I made the following changes:

• Added archive https://web.archive.org/web/20140503190338/http://eprint.iacr.org/2011/506 to https://eprint.iacr.org/2011/506

When you have finished reviewing my changes, you may follow the instructions on the template below to fix any issues with the URLs.

This message was posted before February 2018. After February 2018, "External links modified" talk page sections are no longer generated or monitored by InternetArchiveBot. No special action is required regarding these talk page notices, other than regular verification using the archive tool instructions below. Editors have permission to delete these "External links modified" talk page sections if they want to de-clutter talk pages, but see the RfC before doing mass systematic removals. This message is updated dynamically through the template {{source check}} (last update: 5 June 2024).

• If you have discovered URLs which were erroneously considered dead by the bot, you can report them with this tool.
• If you found an error with any archives or the URLs themselves, you can fix them with this tool.

Cheers.—InternetArchiveBot (Report bug) 21:38, 12 January 2018 (UTC)

Appropriate capitalization?

The Post-Quantum Cryptography Standardization page has chosen to capitalize all letters, whereas this article only capitalizes the first letter. Might I suggest a common choice should be made? I'm inclined to go for all words capitalized. 74.104.188.4 (talk) 22:21, 1 March 2018 (UTC)

This article title definitely should not change. Wikipedia article titles that aren't proper names should not be capitalized (WP:TITLECAPS).

I think Post-Quantum Cryptography Standardization is also correct as it is because it is a proper name: it's the official name of a NIST project and does not refer to just any standardization of PQ crypto. -- intgr [talk] 23:12, 1 March 2018 (UTC)

That would seem to be an argument for renaming the Post-Quantum Cryptography Standardization article, or perhaps splitting it into two. I saw a mention of an attempt to have a standardization of this type in Europe, and an article by that name might be expected to cover any such standardization. 74.104.188.4 (talk) 23:35, 1 March 2018 (UTC)

Crypto Agility

I suggest we add a paragraph on crypto agility as an approach to get prepared on quantum cryptography. There are quite some publications existing on that, and it gives a work around, as the "perfect" solution does not exist yet, however infrastructure which will be implemented today may still exist as legacy hardware and software in the post quantum era. ScienceGuard (talk) 10:09, 20 November 2018 (UTC)

Make the "newer NTRU signature" link blue again.

A while ago, I converted that to a red link because it mistakenly pointed to the older NTRUSign page which only described the older NTRUSign algorithm. A few months ago, I added info for pqNTRUSign to NTRUSign, but I'm not sure if I've added appropriate markup to make the page recognizable to pqNTRUSign links, could somebody verify it and make the link blue again?

Dannyniu (talk) 14:35, 29 January 2019 (UTC)

B vs b in the comparison table

It is not obvious from the table whether the "B" refers to Bytes or bits. "B" is more commonly 8-bit bytes, while key lengths are more commonly expressed in bits.

Are these Bytes or bits? There's plenty of room in the table to spell out either one to avoid confusion to the non-expert reader.

BSD Daemon (talk) 20:14, 8 May 2019 (UTC)

Related sources (zkSnark)

UC Berkeley. Nicholas Spooner nick.spooner@berkeley.edu. UC Berkeley. October 25 Waterwizardm (talk) 08:41, 9 July 2020 (UTC) Waterwizardm (talk) 09:09, 9 July 2020 (UTC)