EP164 Quantum Computing: Understanding the (very serious) Threat and Post-Quantum Cryptography

Guest:

Topics covered:

  • Since one of us (!) doesn't have a PhD in quantum mechanics, could you explain what a quantum computer is and how do we know they are on a credible path towards being real threats to cryptography? How soon do we need to worry about this one?
  • Weโ€™ve heard that quantum computers are more of a threat to asymmetric/public key crypto than symmetric crypto. First off, why? And second, what does this difference mean for defenders?
  • Why (how) are we sure this is coming? Are we mitigating a threat that is perennially 10 years ahead and then vanishes due to some other broad technology change?
  • What is a post-quantum algorithm anyway? If weโ€™re baking new key exchange crypto into our systems, how confident are we that we are going to be resistant to both quantum and traditional cryptanalysis? 
  • Why does NIST think it's time to be doing the PQC thing now? Where is the rest of the industry on this evolution?
  • How can a person tell the difference here between reality and snakeoil? I think Anton and I both responded to your initial email with a heavy dose of skepticism, and probably more skepticism than it deserved, so you get the rare on-air apology from both of us!
0 0 35
0 REPLIES 0