[Cryptography] Why Quantum Cryptanalysis is Bollocks

[Stephen Farrell]

On 01/08/2024 04:13, Peter Gutmann wrote:
> I've just posted the draft slides for a talk with the above title, which also
> happens to perfectly summarise its contents, to:
> 
> http://www.cs.auckland.ac.nz/~pgut001/pubs/bollocks.pdf
> 
> I'd be interested in any comments/feedback/whatever people might have on this.

I'd mainly but not entirely agree. ISTM the potential (but very
unlikely to occur) cost is so high that hybrid KEMs are worth
doing. I do wish people would sit back and relax about signatures
though.

S.

> 
> Peter.
> _______________________________________________
> The cryptography mailing list
> cryptography at metzdowd.com
> https://www.metzdowd.com/mailman/listinfo/cryptography

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL: <https://www.metzdowd.com/pipermail/cryptography/attachments/20240802/c69b6439/attachment.sig>