New answers tagged

0 votes

Is there a quantum-safe password-based authentication method that doesn't require giving the server too much data

Assume we're using a security parameter of "keylength |K| is 256 bits", say for AES. You're asking two things: Is it OK to use less than |K| bits of input entropy? Is this still OK in a PQC ...
J_H's user avatar
  • 240

Top 50 recent answers are included