Quantum computers inch closer?

[Steven M. Bellovin]

In message <3D73DF30.DD119F1B at monmouth.com>, "John S. Denker" writes:

>
>So let's not guess about what quantum algorithms exist.
>It is possible to construct such algorithms, but it 
>requires highly specialized skills.
>

Last time I asked Peter Shor about it, he said that the best known 
quantum algorithms for exhaustive key search for classical ciphers was 
O(sqrt(key size)).  (To me, that's the real reason that AES needs the 
option for 256-bit keys...)

		--Steve Bellovin, http://www.research.att.com/~smb (me)
		http://www.wilyhacker.com ("Firewalls" book)



---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at wasabisystems.com