Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> It ignores the requirement that secret data needs to stay secret for 30 years, or 100 years, or long into the future, and attacks only get better.

What data has to stay secret for 100 years?

To extrapolate backwards, was there anything in 1925 that would be still sensitive today? Its hard to imagine.



"I don't know of any long-lasting secrets" ≠ "There is / will be no need for long-lasting secrets"

The fact you don't know about these might in fact simply indicate the efficacy of the secret keepers.


> "I don't know of any long-lasting secrets" ≠ "There is / will be no need for long-lasting secrets"

This feels like a bad argument for religion.

The point though is not that i don't know any but that i can't concieve of any. I can't even imagine such a scenario, even hypothetically.


Sure, but that inequality of meaning would have to lead to a 'Therefore I conclude this specific, highly infeasible, self-contradictory secret exists' - which is perhaps a common problem with arguments for religion.

I'm confident there's fairly mundane multi-generational secrets, without having to summon the illuminati or knights templar. Either way it doesn't negate the interest in having a technology that could provide that.


Cryptography isn't a technology for keeping secrets, its a technology for keeping secrets in transit. Its not particularly useful for keeping multigenerational secrets (how do you do key management over 100 years?)


Is your suggestion that key rotation is a necessary requirement?

I feel we're coming full circle towards the original discussion about pqc.

(Also, I feel cryptography is very much a tech that can assist you in keeping secrets at rest.)


> Is your suggestion that key rotation is a necessary requirement?

If you want your secret to last more than one human lifetime, you have to enroll new people into the system somehow.

My main argument would be that cryptography is mostly useless in such a scenario. It makes much more sense to put the secret in a filing cabinet, put a lock on the filing cabinet, and if you are really paranoid, maybe hire some people with guns to guard it. Cryptography for such a scenario is the sort of thing that happens in movies not real life.

And even if cryptography was used, it doesn't seem like public-key would be very applicable at all, so pcq is extra irrelavent.


Concur that PK is probably inappropriate, but not necessarily that this means PCQ would be (irrelevant).

The Voynich manuscript is likely a despairingly poor example of any argument, but it's the most famous long-lived / unresolved encoded text I could think of. (I think a year or two there was a claim it was properly decrypted but I'm not convinced it ever will be, mostly because I suspect it wasn't ever meant to make sense.)

Back to the key rotation question - I think we agree that's not a necessary requirement.


> Concur that PK is probably inappropriate, but not necessarily that this means PCQ would be (irrelevant).

PCQ is almost exclusively about public key crypto since traditional symmetric crypto is already quantum safe (with a caveat that you might need to double key lengths to reduce risk from grover's algorithm)


Diplomatic communications about how you plan / succeed at undermining allies. Or communications about atrocities you knew were happening, but decided to ignore.

There is plenty of reason to want to keep diplomatic and military communications secret for a long time.


> Diplomatic communications about how you plan / succeed at undermining allies. Or communications about atrocities you knew were happening, but decided to ignore.

>There is plenty of reason to want to keep diplomatic and military communications secret for a long time.

I don't think that makes sense. Why would you want to keep implicating communications around for 100 years? Wouldn't you just destroy them?

Cryptography isn't useful for secrets you want nobody to know. Its useful for secrets you want some people to know but not others.

That said it also seems questionable how much people care about atrocities hundred years after the fact. For example, nobody is boycotting IBM today for their role in the holocaust.


News of these things does come out from time to time, usually over a shorter time period, and these create embarrassment, shock, pain and anger, but has any had significant substantive consequences? Here is a hypothetical one to consider: FDR secretly informed Hitler that the US would support an invasion of the USSR - how far would be the consequences of such a revelation reach, if it were revealed today?


It's not so much about the impact of the secrets leaking. Instead, its about the impact on communications if diplomats need to worry about their communications leaking.


idk why you're fixated on 100 years, but stuff like nuclear weapons tech is 1940s-1960s technology and that's still classified.


> idk why you're fixated on 100 years

Because that was the number the person i was responding to gave.

In any case north korea has the bomb. I think the secret is out. The most difficult thing at this point is the engineering challenge not the book knowledge.


I was under the impression that information about how to build nukes was mostly well known by most countries, and it is just a matter of getting enough of the right type of uranium or whatever.


And will still be classified in 2045...


My genetic data will be relevant even after I'm dead because my children and grandchildren share it with me. And it's a modern kind of data that didn't exist in 1925.


I hate to tell you, but even if you have never done 23 and me or anything similar, enough of your family has that your genetic data is already very readily accessible to the parties who need it.


Realistically you cant keep that secret though. There are a lot of people who share enough of your dna to reconstruct parts of it. Possibly hundreds. And all it takes is a hair folicule or spit.

You are never keeping that secret against an interested adversary.


Your genetic data is not secret though. It's rather easy to obtain during your lifetime, even without you knowing.


Anything tied to a blockchain.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: