Hacker News new | past | comments | ask | show | jobs | submit login

This is truly an incredible result. I want to adopt some PQC to my own stuff recently and considering Rainbow as one of my choice.

I also know that Cloudflare is now trying to adopt these PQC protocols[0][1], so I checked the Cloudflare blog post after seeing this attack. Then, I found out a blog mentioning this attack[2], lol.

[0] https://blog.cloudflare.com/making-protocols-post-quantum/

[1] https://blog.cloudflare.com/post-quantum-key-encapsulation/

[2] https://blog.cloudflare.com/post-quantum-future/




The KEX schemes that seem to have received the most cryptanalysis are SIKE (SIDH that permits key reuse) and NTRU. They seem solid but I’d only use them in the real world in a hybrid scheme where the key is hashed with the result of a conventional ECC exchange. That way you get that security if the PQ algorithm ends up broken.

The signature schemes seem dodgy to me except for Sphincs and it’s variants and those have big keys and signatures. The keys are not impractically big for many uses but would be tough for things like block chains.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: