Timeline for What is the post-quantum cryptography alternative to Diffie-Hellman?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 26, 2014 at 21:20 | comment | added | Thomas Pornin | I am not saying that a "quantum-threatened" asymmetric encryption algorithm can be used safely for key agreement even in the presence of an attacker with a quantum computer. What I am saying is that any asymmetric encryption algorithm can be used for key agreement; so any quantum-safe asymmetric encryption algorithm is also a quantum-safe key agreement algorithm. | |
| Nov 26, 2014 at 18:30 | comment | added | jayann | I've trouble understanding the first part of this answer. Can anyone please explain why a quantum-threatened asymmetric encryption algorithm (e.g., discrete log) be also used safely for key agreement purposes? As in, if we do have a large-scale operational quantum computer, what aspect of key agreement makes it secure against quantum cryptanalysis? | |
| Aug 25, 2011 at 11:43 | comment | added | Nakedible | Like said in the message, I know that asymmetric encryption can be used for key agreement. But "just" encrypting a random key is far from a proper cryptographic protocol enforcing PFS etc. and evaluating protocol security is not trivial either. | |
| Aug 23, 2011 at 19:00 | history | answered | Thomas Pornin | CC BY-SA 3.0 |