On Mon, Jan 26, 2015 at 3:54 AM, Michael Rogers <[email protected]> wrote:
> A hybrid of ring-LWE and ECDH has also been proposed for Tor, with the > goal of maintaining forward secrecy of current traffic against future > quantum computers This is the most interesting approach I've heard (and by that I mean I've heard it before but...): 1) Use an existing, uncontroversial key-exchange protocol (e.g. X25519) 2) Also use a post-quantum key-exchange protocol When you're done, combine both results together (e.g. as KDF input) The resulting combination, if done correctly, should be at least as strong as the strongest of the "pre-quantum" and "post-quantum" key exchange methods. -- Tony Arcieri
_______________________________________________ Messaging mailing list [email protected] https://moderncrypto.org/mailman/listinfo/messaging
