[Cryptography] composing EC & RSA encryption?

Watson Ladd watsonbladd at gmail.com
Mon Oct 26 13:18:19 EDT 2015


On Mon, Oct 26, 2015 at 12:31 PM, Hanno Böck <hanno at hboeck.de> wrote:
> On Sun, 25 Oct 2015 12:42:27 +0000
> ianG <iang at iang.org> wrote:
<chop>
>
> One decision you'd have to make is whether you'd want to choose one of
> the highly experimental postquantum systems with nice behaviors or
> something conservative which is likely secure, but has extraordinary
> big keys or signatures.

NTRU has been around since the early 90's, has small key sizes, and
reasonable performance. There has been some doubt about the hardness
of some ring based lattice problems due to the fields that are used,
but slight variations on NTRU solve these problems, while, as far as
we know, not introducing new ones.

We don't need postquantum signatures until quantum computers exist.
But data you generate and want to secure now until even after quantum
computing requires postquantum encryption.

>
> --
> Hanno Böck
> http://hboeck.de/
>
> mail/jabber: hanno at hboeck.de
> GPG: BBB51E42
>
> _______________________________________________
> The cryptography mailing list
> cryptography at metzdowd.com
> http://www.metzdowd.com/mailman/listinfo/cryptography



-- 
"Man is born free, but everywhere he is in chains".
--Rousseau.


More information about the cryptography mailing list