[Cryptography] Quillon Graph: A private, post-quantum electronic cash system

[jrzx]

>   That said, I'll raise your implicit challenge directly:
> If the post-quantum push is a trap, what's the recommended
> alternative? Stay classical and accept the (disputed but non-zero)
> quantum risk? Use non-NIST algorithms
> (which ones? with what analysis history?)? The "don't trust NSA"
> position is strong on diagnosis but thin on prescription.

Thin on prescription because no one actually knows what quantum cryptanalysis can do -- the capacity to factor large numbers does not necessarily imply a similar capability on elliptic curves -- and no one knows what quantum resistance might actually look like.

NIST has a long history of being a malicious scam.  If NIST quantum resistance is not a malicious scam, it is snake oil.

The limit on a quantum computation is not storage nor power nor number of operations, but that massive entanglement has to survive through every single gate.  No one has complexity theory for this bound, and we will not have such a theory until a reasonably number of researchers have access to a quantum computer with a reasonable number of qbits.


No one can write a quantum resistant algorithm, because we lack theory and empirical experience.  We don't even know what is quantum vulnerable, except for RSA.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: publickey - jrzx at protonmail.ch - 0x4B137C8A.asc
Type: application/pgp-keys
Size: 1718 bytes
Desc: not available
URL: <https://www.metzdowd.com/pipermail/cryptography/attachments/20260328/2f13ce17/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 603 bytes
Desc: OpenPGP digital signature
URL: <https://www.metzdowd.com/pipermail/cryptography/attachments/20260328/2f13ce17/attachment.sig>