dogeprotocol's comments

On: Quantum Algorithms for Lattice Problems

[dogeprotocol]

Will be interesting to see how this pans out.

On: A hybrid post quantum cryptography scheme using EdDSA (ed25519) + Falcon

[dogeprotocol]

This is a proof of concept implementation that combines a classical and post quantum digital signature scheme. NIST Round 3 implementation of Falcon and EdDSA (ed25519) implementation from https://tweetnacl.cr.yp.to/ is used.

This hybrid implementation is a short term hedge against known lattice based cryptography schemes getting broken.

On: Librandombytes – a public domain library for generating randomness

[dogeprotocol]

Can anyone recommend between Librandombytes and libsodium ramdombytes?

https://github.com/jedisct1/libsodium/tree/master/src/libsod...

[tptacek → dogeprotocol]

If you're using libsodium, use libsodium's randombytes.

On: “Quantum-Safe” Crypto Hacked by 10-Year-Old PC

[dogeprotocol]

Thats true, its a critical risk to Bitcoin, Ethereum etc. The digital signature scheme protecting Bitcoin accounts use elliptic curves which can also be broken using quantum computers.Transactions can be forged using broken accounts.

It's fairly easy to underestimate the time required to change a non quantum resistant to a quantum resistant one.

To protect Bitcoin from quantum computers, the blockchain has to be forked as early as possible, with all blocks re-signed with quantum resistant digital signature schemes. Devil is in the details though.

The Doge Protocol project will fork Bitcoin and move it to a quantum resistant hybrid scheme.

On: Post-quantum encryption contender is taken out by single-core PC and 1 hour

[dogeprotocol]

There is still am ongoing round 4. There will likely be another NIST program for signature schemes with smaller sig size.

Falcon, SPHINCS+ were also standardized btw, not just Dithium.

On: Post-quantum encryption contender is taken out by single-core PC and 1 hour

[dogeprotocol]

Note that SIKE is not a digital signature scheme, it's for key exchange. Hence SIKE cannot be used for signing Bitcoin transactions but can be used for encrypting communication over the wire.

For digital signatures, the 3 standardized schemes are Falcon, Dilithium, SPHINCS+.

Falcon/Dilithium can be used in blockchains though they are much larger compared to elliptic curve ones. SPHINCS+ is way too large.

There is likely going to be a newer NIST program for signature schemes with smaller signature size.

On: An efficient key recovery attack on SIDH

[dogeprotocol]

This paper was posted only yesterday, 3 weeks after NIST announcement.

On: NIST announces preliminary winners of post-quantum competition

[dogeprotocol]

Not just these two, there are a few more that have been standardized and few more that moved to Round 4.

Digital Signatures standardized: Falcon SPHINCS+

Advancing to Round 4 (Key Exchange):

BIKE Classic McEliece HQC SIKE

There will also be another program for post-quantum Digital Signature schemes with smaller signature size.