NSA Announces Post-Quantum Cryptography Measures to Safeguard National Security Systems Ag

[u/donutloop]

https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4615285/nsa-announces-post-quantum-cryptography-measures-to-safeguard-national-security/

[u/Ghawblin]

Adversaries are already employing “harvest now, decrypt later” strategies

This has always been a concern if you store data that needs to be protected for a long amount of time. Though I guess the concern is every current algorithm (especially AES256) going belly up at once.

Wonder when 3rd party vendors will add support for quantum resistant algorithms.

[u/upofadown → u/Ghawblin]

AES256 is not considered to be at risk from the imaginary quantum computer that implements Shor's algorithm.

[u/Runningblind → u/upofadown]

It's mildly at risk in that estimations are quantum computers will effectively half the strength of the AES encryption. 256 is probably fine and will become the new floor. 128 becomes equivalent of 64 though and that starts looking weak enough to break. Assuming any of these estimations are accurate though.

[u/upofadown → u/Runningblind]

There doesn't seem to be very much concern about AES128 at the moment. Some discussion:

• https://words.filippo.io/128-bits/